Forum Discussion
Issue with gMSA when installing Cloud Sync
We are trying to install Cloud Sync to make use of the group writeback. However, we get the same error message every time we try to complete the installation [ error replaced domain with xxx ] ...
Since Test-ADServiceAccount passes, I’d next check KDS root key health, replication, Kerberos encryption types, and whether the Cloud Sync server is explicitly allowed to retrieve the gMSA password. After changing gMSA permissions, wait for AD replication or reboot the server before retrying. Microsoft has a specific Cloud Sync gMSA guide and KDS troubleshooting article.